Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
File:                     74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa (raw, json)
Hash identifier:          qGIngJOL3i644lU+RcP95x+S6rq2ear11SaFgI1lcwk=
Subject key identifier:   E0:6A:BE:98:97:36:04:A5:85:D5:96:50:29:FB:6F:B7:CC:7C:80:5D
Certificate issuer:       /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial:       010D0C9F432858485B6AFD984977114536950C80
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     53904
IP address blocks:        162.244.229.0/24 maxlen: 24
                          205.189.33.0/24 maxlen: 24
                          2001:410:102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:fd:98:49:77:11:45:36:95:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=0f04c4a4-e35a-4881-bf78-f53f71a2ba7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:10:b6:07:5f:e0:ad:78:67:aa:4d:09:f9:94:
                    16:1e:be:77:77:22:8c:47:54:22:25:13:5a:b8:66:
                    cc:b7:1d:c9:ad:16:dd:54:a7:24:4a:e9:d5:9b:a9:
                    77:d4:4e:a8:63:f3:5c:40:eb:00:12:97:32:39:51:
                    3f:6d:b5:d8:d8:f3:3f:00:23:e7:18:e1:53:18:87:
                    4f:df:18:28:50:2d:b5:3c:61:ba:a3:5b:d3:40:9d:
                    d2:b7:e8:d0:83:d6:1c:ec:72:29:af:2b:c9:6b:10:
                    cd:08:03:17:48:a6:c9:c2:94:b3:cd:20:98:db:5d:
                    18:98:6b:a5:f7:5e:ba:2d:27:16:a6:83:c0:af:48:
                    ba:8a:5c:b8:2f:45:f0:95:ef:e3:3b:d4:26:c6:17:
                    fe:f9:9c:32:b9:e9:b8:f7:7d:e6:5a:56:90:c4:fd:
                    71:91:c5:72:5b:cc:19:ab:3a:10:5a:64:96:49:61:
                    22:d8:ac:e8:99:e2:fa:a7:35:0d:7c:4a:3a:61:45:
                    41:55:36:b4:1b:5e:53:05:d8:b5:53:50:a7:e6:e8:
                    2e:a9:ff:90:49:9a:06:55:1f:60:79:10:a5:ec:d1:
                    13:0c:66:3c:08:1a:a9:59:ba:36:5b:91:db:dd:be:
                    dc:47:69:e4:77:db:6f:92:55:54:a5:57:c1:c4:3a:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6A:BE:98:97:36:04:A5:85:D5:96:50:29:FB:6F:B7:CC:7C:80:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/74501d1b-e2c8-3e0d-9717-e4f589ed0c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl

            X509v3 Authority Key Identifier:
                keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.229.0/24
                  205.189.33.0/24
                IPv6:
                  2001:410:102::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:2c:c9:d6:87:0d:7e:3d:74:b8:b3:f1:77:6f:e1:c6:ba:8c:
         0b:0d:dd:0b:a7:4f:77:6a:8b:06:6f:5b:1b:2e:52:05:d1:d2:
         8a:db:6f:d4:63:37:44:22:5f:94:fb:33:62:3b:7a:14:ce:44:
         6f:17:9c:2f:61:57:89:96:66:e0:f6:a7:59:d4:dc:8c:f7:0a:
         ad:ee:6d:da:c5:00:22:40:e2:f5:0b:11:6e:8b:78:2b:b8:0d:
         2b:d1:61:09:ca:80:af:81:6d:be:08:0a:26:82:f8:90:76:07:
         a4:e7:b7:28:2c:ee:a4:77:9d:c8:d8:c1:d6:e1:a7:f9:0a:1f:
         70:98:f0:72:2b:1f:9e:76:49:fc:f5:cd:05:7f:9f:c8:6a:b9:
         d2:67:89:4d:77:4d:ce:e2:63:ea:77:d6:27:76:ce:da:af:5b:
         9a:f7:aa:ab:0c:01:71:84:e7:b6:4d:70:4d:76:33:2c:2b:a3:
         c0:35:9e:35:a6:1d:a1:ae:55:a0:08:c0:b1:30:7d:03:f9:85:
         74:dc:8a:39:e8:89:bd:c9:30:a3:aa:95:78:1b:63:a9:93:9d:
         6b:a4:3a:bf:61:cb:29:8f:12:fe:89:8c:9b:4f:6c:98:e2:b4:
         d0:34:7e:e1:55:5c:7a:a9:7d:58:03:a5:79:2b:06:17:2b:ee:
         17:9c:50:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:19:31 2025 by rpki-client